Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

an update on Loveletter...

  • 09-05-2000 5:11pm
    #1
    Hobbes
    Registered Users, Registered Users 2 Posts: 21,264 ✭✭✭✭


    I heard the Linux one uses the honour system to spread. When the Admin guy gets the email he has to randomly delete the files himself and forward the mail on.


Comments

  • #2
    LoLth
    Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭LoLth


    yer probably all sick to death of Loveletter but I just thought you might find something useful below.

    Overview of known variants of VBS/LoveLet virus
    The following table of VBS/LoveLet variants shows, at a glance, the number of variants known to Sophos and the various messages associated with each variant. The table also shows the extensions targeted by each variant.

    Sophos Anti-Virus detects all these variants with the specified IDE. This table will be updated as further variants become known.

    Please read "How do I install IDE files".

    1.
    Detected by lovelete.ide
    From <user>
    Subject ILOVEYOU
    Body kindly check the attached LOVELETTER coming from me
    Attachment LOVE-LETTER-FOR-YOU.TXT.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp2, mp3
    Files dropped MSKernel32.vbs, Win32DLL.vbs, LOVE-LETTER-FOR-YOU.TXT.vbs, script.ini, LOVE-LETTER-FOR-YOU.HTM
    2.
    Detected by lovelete.ide
    From <user>
    Subject Susitikim shi vakara kavos puodukui...
    Body kindly check the attached LOVELETTER coming from me
    Attachment LOVE-LETTER-FOR-YOU.TXT.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp2, mp3
    Files dropped MSKernel32.vbs, Win32DLL.vbs, LOVE-LETTER-FOR-YOU.TXT.vbs, script.ini, LOVE-LETTER-FOR-YOU.HTM
    3.
    Detected by lovelete.ide
    From <user>
    Subject fwd: Joke
    Body NO
    Attachment Very funy.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp2, mp3
    Files dropped MSKernel32.vbs, Win32DLL.vbs, Very Funny.vbs, script.ini, Very Funny.HTM
    4.
    Detected by lovelete.ide
    From <user>
    Subject ILOVEYOU
    Body kindly check the attached LOVELETTER coming from me
    Attachment LOVE-LETTER-FOR-YOU.TXT.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp2, mp3
    Files dropped MSKernel32.vbs, Win32DLL.vbs, LOVE-LETTER-FOR-YOU.TXT.vbs, script.ini, LOVE-LETTER-FOR-YOU.HTM
    5.
    Detected by lovelete.ide
    From <user>
    Subject Mothers Day Order Confirmation
    Body We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special. We have attached a detailed invoice to this email. Please print out the attachment and keep it in a safe place.Thanks Again and Have a Happy Mothers Day! mothersday@subdimension.com
    Attachment mothersday.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, ini, bat, mp2, mp3
    Files dropped MSKernel32.vbs, Win32DLL.vbs, mothersday.vbs, script.ini, mothersday.HTM
    6.
    Detected by lovelete.ide
    From <user>
    Subject Important ! Read carefully !!
    Body Check the attached IMPORTANT coming from me !
    Attachment IMPORTANT.TXT.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp2, mp3
    Files dropped ESHernel32.vbs, ES32DLL.vbs, Important.TXT.vbs, script.ini, Important.HTM
    7.
    Detected by lovelete.ide
    From support@symantec.com
    Subject Virus ALERT!!!
    Body Dear Symantec customer, Symantec's AntiVirus Research Center began receiving reports regarding VBS.LoveLetter.A virus early morning on May 4, 2000 GMT. This worm appears to originate from Asia Pacific region. Distribution of the virus is widespread and hundreds of thousands of machines are reported infected. etc.
    Attachment protect.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, com, bat, jpg, jpeg, mp2, mp3
    Files dropped MSKernel32.vbs, Win32DLL.vbs, protect.vbs, script.ini, protect.htm
    8.
    Detected by lovelete.ide
    From <user>
    Subject Dangerous Virus Warning
    Body There is a dangerous virus circulating. Please click picture attached to view it and learn to avoid it.
    Attachment virus_warning.jpg.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, wav, txt, gif, doc, htm ,html, xls, jpg, jpeg, mp2, mp3
    Files dropped MSKernel32.vbs, Win32DLL.vbs, virus_warning.jpg.vbs, script.ini, _virus_warning.htm
    9.
    Detected by loveletf.ide
    From <user>
    Subject How to protect yourself from the ILOVEYOU bug!
    Body Here's the easy way to fix the love virus.
    Attachment Virus-Protection-Instructions.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp2, mp3
    Files dropped MSKernel32.vbs, Win32DLL.vbs, Virus-Protection-Instructions.vbs, script.ini, Virus-Protection-Page.HTM
    10.
    Detected by loveletg.ide
    From <user>
    Subject ILOVEYOU
    Body kindly check the attached LOVELETTER coming from me
    Attachment LOVE-LETTER-FOR-YOU.TXT.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp2, mp3
    Files dropped MSKernel32.vbs, Win32DLL.vbs, LOVE-LETTER-FOR-YOU.TXT.vbs, script.ini, LOVE-LETTER-FOR-YOU.HTM
    11.
    Detected by loveletg.ide
    From <user>
    Subject Thank You For Flying Arab Airlines
    Body Please check if the bill is correct, by opening the attached file
    Attachment ArabAir.TXT.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, dll, sys, exe
    Files dropped MSKernel32.vbs, Win32DLL.vbs, ArabAir.TXT.vbs, script.ini, no-hate-FOR-YOU.HTM
    12.
    Detected by loveletg.ide
    From <user>
    Subject Bewerbung Kreolina
    Body Sehr geehrte Damen und Herren!
    Attachment BEWERBUNG.TXT.vbs
    Extensions targeted js, jse, css, wsh, sct, hta, jpg, jpeg, mp3, mp2
    Files dropped MSKernel32.vbs, Win32DLL.vbs, BEWERBUNG.TXT.vbs, script.ini
    13.
    Detected by ll-dam.ide
    From <user>
    Subject Recent Virus Attacks - Fix
    Body Attached is a copy of a script that will reverse the efects of the LOVE-LETTER-TO-YOU.TXT.vbs as well as the FW:JOKE, ...
    Attachment BAND-AID.DOC.vbs
    Extensions targeted js, jse, css, wsh, sct, hta, jpg, jpeg, gif, tif, tiff, wav, mp2, mp3, lnk, bak, doc, xts, rtf, txt, htm, html, xml, mny, zip, bmp, cab, inf
    Files dropped MSKernel32.vbs, Win32DLL.vbs, BAND-AID.DOC.vbs, script.ini
    14.
    Detected by loveletg.ide
    From <user>
    Subject LOOK!
    Body he he ... check this out
    Attachment LOOK.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, xls, mdb, lnk, exe
    Files dropped MSUser32.vbs, User32DLL.vbs, LOOK.vbs, script.ini
    15.
    Detected by ll-dam.ide
    From <user>
    Subject Yeah, Yeah, another time to DEATH...
    Body This is the Killer for VBS.LOVE-LETTER.WORM
    Attachment Vir-Killer.vbs
    Extensions targeted vbs, vbe, zip, rar, asm, pas
    Files dropped Vir-Killer.vbs
    16.
    Detected by loveletg.ide
    From <user>
    Subject Variant Test
    Body This is a variant to the vbs virus
    Attachment IMPORTANT.TXT.vbs
    Extensions targeted vbs, vbe, mpg, mpeg, avi, qt, qtm
    Files dropped sndvol32.vbs, IEAKDLL.vbs, IMPORTANT.TXT.vbs, script.ini
    17.
    Detected by loveletg.ide
    From <user>
    Subject I Cant Believe This!!!
    Body I Cant Believe I Have Just Recieved This Hate Email ... Take A Look!
    Attachment KillEmAll.TXT.vbs
    Extensions targeted js, jse, css, wsh, sct, hta, gif, bmp, wav, mid
    Files dropped killer1.vbs, killer2.vbs, KillEmAll.TXT.vbs
    18.
    Detected by loveletg.ide
    From <user>
    Subject PresenteUOL
    Body O UOL tem um grande presente para voce, e eh exclusivo. Veja o arquivo em anexo. http://www.uol.com.br
    Attachment UOL.TXT.vbs
    Extensions targeted vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp3, mp2, exe, com, ini
    Files dropped MSKernel32.vbs, Win32DLL.vbs, UOL.TXT.vbs, script.ini, UOL.HTM


    There is a Unix variant of a LoveLetter virus which targets .jpg, .mpg, .mpeg and .gif file extensions. This variant has not been seen in the wild and is unlikely to be seen in its current form. We have produced an IDE as people have been asking about the Unix variant.

    There are also many damaged versions of the VBS/LoveLet virus. These versions are detected by ll-dam.ide. See VBS/LoveLet virus FAQs for more information.


Advertisement